https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T10:29:31.355302+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-24553 CVE-2020-24553 2026-10-06T10:29:31.394488+00:00

Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.

 https://vulnerability.circl.lu/vuln/usn-4758-1 USN-4758-1 — golang-1.10, golang-1.14 vulnerability 2026-10-06T10:29:31.394623+00:00

Affected: Ubuntu:16.04:LTS: golang-1.10, Ubuntu:18.04:LTS: golang-1.10, Ubuntu:20.04:LTS: golang-1.14

It was discovered that Go applications incorrectly handled uploaded content. If a user were tricked into visiting a malicious page, a remote attacker could exploit this with a crafted file to conduct cross-site scripting (XSS) attacks.